authentik Reviews and details

Social recommendations and mentions

• Show HN: Stack, the open-source Clerk/Firebase Auth alternative

  If you're looking for a system that has more features, is user friendly, a nice admin ui and easy deployments compared to Keycloak. Please give https://goauthentik.io/ a shot. Not affiliated in any way, just a very happy user. It has -an admin UI - Supports (LDAP, SAML, OAUTH, social logins) - MFA, Passkeys - Application access based on user groups etc. - Source: Hacker News / 23 days ago

• Keycloak SSO with Docker Compose and Nginx

  I've been eyeing authentik[1] and authelia[2]. Authelia looks really good to me, but the fact that keycloak has connectors for angular and you need to setup oidc angular plugins with authelia for example made me a little bit wary. But I guess having a config for Keycloak makes it's easier to get started. [1] https://goauthentik.io/ [2] https://www.authelia.com/. - Source: Hacker News / 3 months ago

• Authentik setup via Portainer?

  I've been searching around for a while now, and struggling with getting Authentik setup on my NAS. I'd like to deploy via Portainer, but getting lost in the documentation just to deploy. Source: 5 months ago

• Show HN: Obligator – An OpenID Connect server for self-hosters

  Personally I went with Keycloak, because it's fairly well documented and also has Docker images available: https://www.keycloak.org/getting-started/getting-started-docker although the fact that they want you to create an "optimized" image yourself and have a long build/setup process on startup instead is slightly annoying: https://www.keycloak.org/server/containers Regardless, with something like mod_auth_openidc... - Source: Hacker News / 7 months ago

• Issues with authentik

  Hello ! I am hosting a server under NixOS with multiple services, and to simply the identity management, I use authentik (https://goauthentik.io/) which can be compared to keycloak. Everything works fine until I try to enable mastodon to host an instance : authentik returns an error 400 and nothing changes this but disabling mastodon. Does anyone have an idea of what could be the cause of this ? Source: 10 months ago

• K3S, Authentik, And Practical Use

  My thought is to have the ZAC only be accessible to users connected to OpenZiti, and to have the ZAC behind/to the side of Authentik for SSO. Source: 11 months ago

• Keycloak – Open-Source Identity and Access Management Interview

  What do folks think about authentik[0]? I tried to set up Keycloak but after fiddling with it for awhile before giving up and trying something else. It felt really weird that I was just extracting a tar and running a jar instead of some pre-packaged solution, but that might just be me. Authentik was pretty easy to set up for my homelab, but maybe I'm missing something given all the positive recommendations for... - Source: Hacker News / 11 months ago

• Authentik with Docker swarm

  Has anybody been able to get Authentik working with Docker swarm? I'm hitting a brick wall and struggling to work out where the issue is. I can get it up and running using Docker Compose without any issues. Source: 11 months ago

• Architecting a good homelab ingress

  Cloudflare Tunnels to hide your public IP (no firewall rules allowing traffic to public IP, only private traffic through tunnel), Cloudflare Access to protect services when outside of your network. Optionally Authentik to provide a unified authentication solution to all your services and act as an IDP for Cloudflare Access (or you can use Google, Microsoft login, etc.). Source: 11 months ago

• Pomerium or Authentik?

  Last week I looked at more popular solutions such as Authelia and Authentik. Both seem rather trivial too implement, although Authelia doesn't have a management UI. Authentik seems to have a pretty large footprint from what I've read. Source: 12 months ago

• Some questions on setting up for a few friends

  Edit: Some very helpful person on the Matrix suggested Authentik rather than Authelia, as it has support for LDAP, which Jellyfin supports natively. Source: about 1 year ago

• Q: I need help with securing my selfhosted services

  I had the same dilemma as you have and after a lot of research I decided to go with Authentik. It has a dashboard (I don’t use it), option of using 2FA, SSO, nginx built in for reverse proxy and much more. It’s a little bit rough to get started but it has everything you could possible need. Source: about 1 year ago

• Keycloak with PostgreSQL on Kubernetes

  How does zitadel compare to authentik (https://goauthentik.io/) or authelia (https://www.authelia.com/)? - Source: Hacker News / about 1 year ago

• SSO questions...

  Hi there u/THMMYos ! InvenTree supports OIDC or OAuth. From personal usage, I can confirm that InvenTree with OIDC and authentik (https://goauthentik.io/) work great together! Authentik in general is a great solution, it supports federation with other providers, a lot of different protocols and supports very versatile tools for transforming user attributes. Source: about 1 year ago

• Authelia auto-configuration script v1.0!

  You can try Authentik instead, their UI is kinda neet. Source: about 1 year ago

• Identity management for home lab

  I use Authentik as well, It's fairly straight forward, flexible, and offers many different forms of auth. You can create all sorts of different Auth flows to suit your needs. I use it as a directory as well as the Identity Provider for all my internal web apps. While you can add a directory as a source it contains an internal directory so its self-contained and simple yet if you wanted to add a directory store(... Source: about 1 year ago

• Any alternative for Authelia?

  Authentik gets mentioned often but I havent used it myself yet. Source: about 1 year ago

• Auto Login of all containers

  Authentik or Authelia are great options for it. Source: about 1 year ago

• qBittorrent API is accessible regardless of username/password. Huge security concern.

  However, this app is able to authenticate and control qBit regardless of the webui username and password supplied; all it needs is the URL (qbittorrent.example.com) and it has full access. This is a huge security concern as this is a public facing service, and anyone with this url would be able to interact with my qBit instance, regardless of the fact that I'm protecting it with an authentication system. Source: about 1 year ago

• Solf-hosted login form for self-hosted app ?

  I've used Authentik. Somewhat of a complex setup, but I like the customizability of it. Works with forward_auth in your (nginx,traefik,caddy). I have it setup so people can login with their discord or google accounts. Source: about 1 year ago

• Small Church Authentication Server Recomendations

  If you’re looking to authenticate to a bunch of other services on your dockers/ vms then maybe you’d need something like Authentik, which is feature packed but a bit complicated to get setup. Source: over 1 year ago